Panasonic ub9000 control

Any hope of ip controls? You can now control the 9000 thru both Alexa and google so there must be some type of api.

We believe there may be an API that exists for the DP-UB820. But there is not yet any indication of that for the 9000. At this point nothing is published so officially none of the Panasonic models support IP control. If there were genuine evidence of IP control such that we could work on it with solid leads, we'd acquire test units, but we're not aware of any yet.

Don't know if you've seen this, but the C4 does have IP control for the 9000. Some have also reported getting the driver to partially/nearly-fully work on the 820.

That's what I mentioned before. Someone would need to figure out the API because Panasonic does not publish it.

I have an 820 en route, but not C4. Was already planning on using wireshark to see what's happening once configuring Alexa and issuing voice commands with it. I know you've already done a fair amount of testing with these two units--so if you've already done it and it's turned up nothing I wont bother.

I tested the 820. You're not likely to find a way into that without WireShark on an existing known-good protocol. Any Alexa stuff will be unrelated as it would be cloud based.

So I've been able to at least get some REST commands working to get the current state (stop, play, pause) and playback elapsed time, but I've not been able to get any control of the unit working. All commands are POST. The RawContent value when sending commands gives a number (haven't figured out what it means yet). Will have to mess around with it more Thursday or Friday.

Post the URLs you used that work for status. Maybe that will trigger something.

Get Current Status:

curl -H "User-Agent:MEI-LAN-REMOTE-CALL" -d 'cCMD_PST.x=100&cCMD_PST.y=100' http://<IP>:80/WAN/dvdr/dvdr_ctrl.cgi

Response when stopped/nothing playing:

00,"",1

0,0,0,00000000,,0

• Closing connection 0

Response when playing at 2077 seconds into playback:

00,"",1

1,2077,0,00000000,,0

• Closing connection 0

Response when paused at 2084 seconds into playback:

00,"",1

2,2084,0,00000000,,0

• Closing connection 0

In theory a power on/off command should be the following, but I get a wonky return message:

curl -H "User-Agent:MEI-LAN-REMOTE-CALL" -d 'data=cCMD_RC_POWER.x=100&cCMD_RC_POWER.y=100' http://<IP>:80/WAN/dvdr/dvdr_ctrl.cg

Response:

52,"?F?؂Ɏ??s???܂????B"

• Closing connection 0

52 is obviously not a HTTP/REST return code (which is 200 here), but it is a curl return code that can be given. It's usually "Empty reply from server." An incorrect command that isn't on the list of Panasonic commands will give the following:

FE,"This operation is not possible because the main unit is busy with an operation or main unit could not be communicated with."

• Closing connection 0

Just as an FYI, this is all just from poking around and digging a bit. Haven't gotten deep into packet inspection, MITM/proxy work, etc. yet

dvdr_ctrl.cgi

That's the 2011 Panasonic BD protocol. So just try that codeset. Add manual Blu-ray, port 80, brand Panasonic, "BDT Series (2011/2012 Models)". Let me know what if anything works.

AH---trial expired (not purchasing yet since I wanted to test a bunch of devices out) but I'll purchase 3 months here to try it.

No luck--I already had tried that the other day and had no success :frowning_face:

Switch to beta so you can look at the logs. Then send them to support if needed. If we can get it working this way, that would be nice. If you don't have access to beta, submit a ticket.

Ok. Will submit a ticket.

Setting up the 820 as a BDT Series (2011/2012 Models) device and looking at the logs in the beta app didn't product much. No matter what button I press the command cCMD_GET_STATUS is what appears in the log but no good data us returns. Only 52 followed by the random string of what looks like Unicode values.

Just need to scroll up. Use tickets so we can see it.

May have already been determined, but the response coming back from all the commands that don't work is actually Japanese.

It's stating "Certification failed" or "Authorization failed" depending on the translation engine (I used google)

So it sounds like they re-used their ancient protocol from 2011, but then added some undetermined authentication.

Hello....my friend told that the installer used either the UB900 or UB9000 driver to make the UB820 work w/IP control and the installer did also enable the Alexa/Google integration since that evidently helps on the UB820.

I discovered some information about the authentication that is used with the control 4 IP driver. The bad news is each command must be authenticated by a code that is unique for each RC command request sent. It worked like this on a UB9000:

Before each command this request is sent:

POST /cgi-bin/get_nonce.cgi HTTP/1.1

Content-Length: 12

User-Agent: MEI-LAN-REMOTE-CALL

Content-Type: application/x-www-form-urlencoded

SID=1234ABCD

The response is this:

Server: Panasonic AVC Server/1.00

X-MEI-RESULT: OK

Content-Length: 34

Content-Type: text/plain

Y4VzvkFtmB0RTFifei57WllaCogyJzGl

And then immediately after, the command is sent to the player:

POST /WAN/dvdr/dvdr_ctrl.cgi HTTP/1.1

Content-Length: 124

User-Agent: MEI-LAN-REMOTE-CALL

Content-Type: application/x-www-form-urlencoded

cCMD_RC_UP.x=100&cCMD_RC_UP.y=100&cAUTH_FORM=C4&cAUTH_VALUE=3C9049490C0D21D835A1E804AFDD5D136242E4E978043C76BB014479D54099B2

The nonce response and and AUTH_VALUE are different for every command sent by the control 4 driver to the player. My speculation is that the driver probably has a hard coded key that is used to encrypt the nonce to create the AUTH_VALUE. And the player does the same calculation and checks that the AUTH_VALUE matches.

:frowning:

Wow--this is an insane find. If only we could figure out what the hash or salt was for any of these.

I've recently stumbled back into this as I'm getting a whole home HVAC system (Aprilaire IAQ) with a special stat (8840 thermostat) that works with literally every automation provider under the sun (including Alexa and Google assistant) but not HomeKit. To get around this I'm going to try and use Assistant Relay to tie into Home Assistant and then bridge into HomeKit. Will be interesting to see how it works.

Will try and do the same thing with this Blu-ray player as it works with Google Assistant.

Great update--hoping you can get @Will_Price this info @codtrice!!!

Control for these devices has been added as part of tonight's 7.0.1 release.

• Panasonic Blu-ray Player IP Control: Current models including the DP-UB820 and DP-UB9000 can now be controlled directly. [7.0.1]

It might also work with the UB420, but I was not able to test that before release.

Note that you must activate the Voice Control option in the Settings on the device (even though it seems otherwise totally irrelevant) as that switch also allows normal control.

• Voice Control: ON and registered at the Panasonic site listed in the UI

• Registration Type: Auto

• Networked Standby: On

Greetings,

For all of those interested in setting this up on their respective Panasonic 820/9000 players, I can confirm that it works. As indicated above, you need to follow the instructions and setup a simple account with Panasonic. After that I am able to control my 820 via IP. There doesn't seem to be any live feedback. I am not certain if that is something that can be instituted.

Regards,

The feedback call present in Panasonic 2012 models is there, but seems non-functional so for now I've hidden it. It just doesn't return data that is correct. I was hopeful it might based on @taylorwmj post from Jun'20, but in my tests all of the data returned was bogus so possibly they disabled it in firmware since that time.

Anyway, it works. Since it is otherwise a nice player, and it finally works for IP control, great.

Got my UB9000 and 820 working on IP. Thanks for your help @RalphP

Greetings,

Anytime Frank!

Regards,

It's the Voice Control option on the Panasonic, not related to Roomie. That's what leads you to their registration.

I wanted to add that the Voice Control set up and web registration for the UB420 also works to turn on control over IP. It's working great so far.

Panasonic made such a weird, roundabout approach to network commands, but at least it's there.

Suddenly out of the blue my UB9000 doesn't respond to commands. Ive checked everything from the Ip address which is manually entered not DHCP ( Still the same ) checked the voice control still active and connected, even checked the router device connected same IP etc. Nothing has changed on the iPad mini everything is the same. Any ideas ??

Hello,

my current blu ray player had given up and therefore i'm searching alternatives and found the panasonic dp-ub824 which should have the same firmware like ub800, ub9000.

Therefore it's correct that i can control this player with roomie?

If anyone can confirm that, it would be much appreciated.

Based on a quick Google, my guess is the 824 is just the German model? Almost certainly the same as the US model as far as IP control goes.

Interesting

https://www.avforums.com/threads/lets-try-again-to-put-the-free-in-regionfreedom.2441584/post-31685167

Unnecessary to try to patch your firmware as Roomie does properly support the authentication.

However, if anyone does try to patch their Panasonic player, you would want to switch the codeset used by Roomie from the default to the old "BDT Series (2011/2012 Models)" from before they added the authentication step.

Removing the authentication will increase the responsiveness ever so slightly because every single command needs to be a double round trip in the normal players.

The process looks fraught with risk, so given it isn't needed anyway with Roomie, caveat emptor.

Does Roomie show the total time of the disc being played?

We ask for it, but it only worked properly with DVDs in the 2010-2012 models (like, actual DVDs). Once Blu-ray came along, Panasonic started sending garbage data for that response. Then, with the authentication they introduced in 2018, it became a bad idea even to request the status because doing so might delay the double round trip authentication when the user pressed a button. Anyway, time feedback last worked around 2011 with DVDs only. Our time status request call does still exist though (and works today with a 2010-2012 player), so possibly it could return good data one day from a modern player if they fixed the issue in which case we would display it with no change on our side. We're currently just dropping their garbage responses.

Total mess, unimaginable how far Oppo has come compared to Panasonic.

i know about

cCMD_PST.x=100 -d cCMD_PST.y=100

but this only show current time and works for BD

and works today with a 2010-2012 player

What query code? there is somewhere extended documentation about available commands?

Tested

With "patch" panasonic works with auto method and manual if we select 2011/2012.

Using automatic will spend time requesting authentication for every call, so if you have the patch then make sure to use the 2012 codeset to eliminate that.

Not gonna try this on our 820 until they claim it works with current firmware.